Lucene search
+L

1096 matches found

CNVD
CNVD
•added 2021/07/08 12:00 a.m.•55 views

Cisco 7000 Series IP Camera Memory Leak Vulnerability (CNVD-2021-57459)

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

6.5CVSS1.4AI score0.00381EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•24 views

Weak Password Vulnerability in IP Camera of Zhejiang Dahua Technology Co.

IP Camera is a network camera management software. A weak password vulnerability exists in IP Camera of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/13 12:00 a.m.•12 views

PT-2021-20028

Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua nvr-1xxx firmware Dahua nvr-2xxx firmware Dahua nvr-4xxx firmware Dahua nvr-5xxx firmware Dahua nvr-6xx firmware Dahua vth-542xh firmware Dahua vto-65xxx...

10CVSS7.6AI score0.99593EPSS
SaveExploits9References38
Positive Technologies
Positive Technologies
•added 2021/06/13 12:00 a.m.•11 views

PT-2021-20027

Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua sd1a1 firmware Dahua sd22 firmware Dahua sd49 firmware Dahua sd50 firmware Dahua sd52c firmware Dahua sd6al firmware Dahua tpc-bf1241 firmware Dahua tpc-bf222...

10CVSS7.8AI score0.99987EPSS
SaveExploits13References50
NVD
NVD
•added 2021/06/09 3:15 p.m.•23 views

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

4.9CVSS0.00832EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/20 12:00 a.m.•8 views

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

4.9CVSS5.9AI score0.00832EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/05/09 12:00 a.m.•6 views

Unauthorized Access Vulnerability in Cohu IP Camera Control

Cohu offers the broadest portfolio of equipment and services for back-end semiconductor manufacturing, including one-stop test and handling equipment, thermal subsystems, test contacts, visual inspection and MEMS test solutions. An unauthorized access vulnerability exists in Cohu IP Camera Contro...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/04/30 12:00 a.m.•7 views

Logic flaw vulnerability in IP Camera of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the IP Camera of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

6.7AI score
SaveExploits0
NVD
NVD
•added 2021/04/28 10:15 a.m.•21 views

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

9CVSS0.03786EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/28 10:15 a.m.•19 views

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

7.2CVSS6AI score0.03786EPSS
SaveExploits0References4
Prion
Prion
•added 2021/04/28 10:15 a.m.•34 views

Command injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

9CVSS7.6AI score0.03786EPSS
SaveExploits0References4Affected Software41
Cvelist
Cvelist
•added 2021/04/28 9:30 a.m.•35 views

CVE-2021-30169 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential...

5.3CVSS7.7AI score0.01679EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/04/28 9:30 a.m.•37 views

CVE-2021-30168 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...

9.8CVSS9.6AI score0.02075EPSS
SaveExploits0References4
CVE
CVE
•added 2021/04/28 9:30 a.m.•60 views

CVE-2021-30166

CVE-2021-30166 affects Meri t Lilin IP cameras (MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 series). The root cause is the NTP Server configuration function not being verified with special parameters, enabling a remote attacker with privileged access to perform a command injection and execute arbitrary ...

9CVSS7.6AI score0.03786EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/04/28 9:30 a.m.•33 views

CVE-2021-30166 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

7.2CVSS7.8AI score0.03786EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/28 12:00 a.m.•4 views

CVE-2021-30166: Improper Neutralization of Special Elements used in an OS Command

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

9CVSS6.2AI score0.03786EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/30 3:15 a.m.•28 views

CVE-2020-19639

Cross Site Request Forgery CSRF vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI...

8.8CVSS0.00511EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/30 3:15 a.m.•30 views

CVE-2020-19643

Cross Site Scripting XSS vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page...

6.1CVSS0.00749EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/30 3:15 a.m.•34 views

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

6.2CVSS0.00446EPSS
SaveExploits1References1
Prion
Prion
•added 2021/03/30 3:15 a.m.•25 views

Design/Logic Flaw

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

4.6CVSS6.6AI score0.00446EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder